Waxell
Pre-built small business workflows to help you run and grow your business. Supports a majority of the tools you already use. You approve every step that touches money or customers. Install and then ask Claude to help you get onboarded.
Anthropic's own description, from the plugin's files.
Stars
34,583
Version
v1
Copies
0

Overview

allowNo issues found

Nothing high or critical in what's published. 35 findings of lower severity are listed below.

Highest severity
medium
Findings
35
What ran
Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

Skills in this plugin

We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

No issues Nothing high or critical in what's published. 35 findings of lower severity are listed below.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (35)

medium · 20

  • medium

    clay: connects to an unrecognised server (api.clay.com)

    .mcp.json · mcp_risk:M9

  • medium

    emergent: connects to an unrecognised server (mcp.emergent.sh)

    .mcp.json · mcp_risk:M9

  • medium

    expensify: connects to an unrecognised server (www.expensify.com)

    .mcp.json · mcp_risk:M9

  • medium

    gmail: connects to an unrecognised server (gmailmcp.googleapis.com)

    .mcp.json · mcp_risk:M9

  • medium

    google-calendar: connects to an unrecognised server (calendarmcp.googleapis.com)

    .mcp.json · mcp_risk:M9

  • medium

    google-drive: connects to an unrecognised server (drivemcp.googleapis.com)

    .mcp.json · mcp_risk:M9

  • medium

    hubspot: connects to an unrecognised server (mcp.hubspot.com)

    .mcp.json · mcp_risk:M9

  • medium

    intuit-mailchimp: connects to an unrecognised server (ai-inc.mailchimp.com)

    .mcp.json · mcp_risk:M9

  • medium

    intuit-quickbooks: connects to an unrecognised server (ai-inc.quickbooks.intuit.com)

    .mcp.json · mcp_risk:M9

  • medium

    ringex-chat: connects to an unrecognised server (mcp.labs.ringcentral.com)

    .mcp.json · mcp_risk:M9

  • medium

    shopify: connects to an unrecognised server (setup.shopify.com)

    .mcp.json · mcp_risk:M9

  • medium

    slack: connects to an unrecognised server (mcp.slack.com)

    .mcp.json · mcp_risk:M9

  • medium

    tiktok: connects to an unrecognised server (business-api.tiktok.com)

    .mcp.json · mcp_risk:M9

  • medium

    trello: connects to an unrecognised server (mcp.trello.com)

    .mcp.json · mcp_risk:M9

  • medium

    xero: connects to an unrecognised server (mcp.xero.com)

    .mcp.json · mcp_risk:M9

  • medium

    zoho-books: connects to an unrecognised server (claude-zohobooks.zohomcp.com)

    .mcp.json · mcp_risk:M9

  • medium

    zoho-crm: connects to an unrecognised server (claude-zohocrm.zohomcp.com)

    .mcp.json · mcp_risk:M9

  • medium

    zoho-desk: connects to an unrecognised server (claude-zohodesk.zohomcp.com)

    .mcp.json · mcp_risk:M9

  • medium

    zoho-projects: connects to an unrecognised server (claude-zohoprojects.zohomcp.com)

    .mcp.json · mcp_risk:M9

  • medium

    zoom: connects to an unrecognised server (mcp.zoom.us)

    .mcp.json · mcp_risk:M9

low · 10

  • low

    airwallex-agentos: connects to mcp.airwallex.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    atlassian-rovo: connects to mcp.atlassian.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    canva: connects to mcp.canva.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    docusign: connects to mcp.docusign.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    myob: connects to mcp.myob.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    paypal: connects to mcp.paypal.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    ramp: connects to mcp.ramp.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    square: connects to mcp.squareup.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    wix: connects to mcp.wix.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    zapier: connects to mcp.zapier.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

info · 5

  • info

    apollo-io: connects to mcp.apollo.io (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

  • info

    gusto: connects to mcp.api.gusto.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

  • info

    monday-com: connects to mcp.monday.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

  • info

    notion: connects to mcp.notion.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

  • info

    stripe: connects to mcp.stripe.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (1.35.1), seen 2026-11-03.

Files

Files

214 files, 1.3 MB in total. Names only; open them on GitHub.

  • .claude-plugin/plugin.json
  • .mcp.json
  • README.md
  • shared/absent-is-not-zero.md
  • shared/artifact-style.md
  • shared/chain-seams.md
  • shared/connector-call-shapes.md
  • shared/connector-neutrality.md
  • shared/crm-of-record.md
  • shared/currency-and-locale.md
  • shared/document-format.md
  • shared/gmail-inbox-traps.md
  • shared/personal-data.md
  • shared/quickbooks-report-traps.md
  • shared/reference/artifact-example.html
  • shared/tenant-scope.md
  • shared/untrusted-content.md
  • shared/voice-profile.md
  • skills/ad-manager/SKILL.md
  • skills/ad-manager/reference/ad_copy.md
  • skills/ad-manager/reference/change_playbook.md
  • skills/ad-manager/reference/data_sources.md
  • skills/ad-manager/reference/diagnostics.md
  • skills/ad-manager/reference/gotchas.md
  • skills/ap-processor/SKILL.md
  • skills/ap-processor/reference/coding_rules.md
  • skills/ap-processor/reference/gotchas.md
  • skills/ap-processor/reference/intake_and_extraction.md
  • skills/ap-processor/reference/matching_and_exceptions.md
  • skills/ap-processor/reference/payment_run.md
  • skills/brand-style/SKILL.md
  • skills/build-agent/SKILL.md
  • skills/build-agent/reference/capture.md
  • skills/build-agent/reference/gotchas.md
  • skills/build-agent/reference/skill_authoring.md
  • skills/build-connector/SKILL.md
  • skills/build-connector/reference/discovery.md
  • skills/build-connector/reference/gotchas.md
  • skills/build-connector/reference/paths.md
  • skills/build-connector/reference/use-zapier.md
  • skills/business-pulse/SKILL.md
  • skills/business-pulse/reference/data_sources.md
  • skills/business-pulse/reference/gotchas.md
  • skills/business-pulse/reference/output_template.md
  • skills/business-pulse/reference/thresholds.md
  • skills/business-pulse/reference/v2_sources.md
  • skills/call-list/SKILL.md
  • skills/canva-creator/SKILL.md
  • skills/canva-creator/reference/canva-api.md
  • skills/canva-creator/reference/examples/boutique-brief-campaign.md
  • skills/canva-creator/reference/gotchas.md
  • skills/canva-creator/reference/hubspot-staging.md
  • skills/cash-flow-snapshot/SKILL.md
  • skills/cash-flow-snapshot/reference/examples/worked-example.md
  • skills/cash-flow-snapshot/reference/gotchas.md
  • skills/cash-flow-snapshot/reference/v2_sources.md
  • skills/close-month/SKILL.md
  • skills/content-strategy/SKILL.md
  • skills/content-strategy/reference/examples/retail-boutique-example.md
  • skills/content-strategy/reference/gotchas.md
  • skills/content-strategy/reference/v2_sources.md
  • skills/contract-review/SKILL.md
  • skills/contract-review/reference/docusign-fetch.md
  • skills/contract-review/reference/examples/flagged-summary-saas.md
  • skills/contract-review/reference/gmail-fetch.md
  • skills/contract-review/reference/gotchas.md
  • skills/contract-review/reference/m365-fetch.md
  • skills/crm-autopilot/SKILL.md
  • skills/crm-autopilot/reference/cleanup-checklist.md
  • skills/crm-autopilot/reference/examples/cleanup-deal.md
  • skills/crm-autopilot/reference/examples/log-call-happy-path.md
  • skills/crm-autopilot/reference/examples/log-email-happy-path.md
  • skills/crm-autopilot/reference/gotchas.md
  • skills/crm-autopilot/reference/hubspot-fields.md
  • skills/crm-autopilot/reference/lightweight_crm.md
  • skills/crm-autopilot/reference/salesforce-fields.md
  • skills/crm-autopilot/reference/standing_mode.md
  • skills/grant-rfp-writer/SKILL.md
  • skills/grant-rfp-writer/reference/drafting.md
  • skills/grant-rfp-writer/reference/go_no_go.md
  • skills/grant-rfp-writer/reference/gotchas.md
  • skills/grant-rfp-writer/reference/opportunity_sources.md
  • skills/grant-rfp-writer/reference/org_profile.md
  • skills/grow-pipeline/SKILL.md
  • skills/growth-pulse/SKILL.md
  • skills/growth-pulse/reference/data_sources.md
  • skills/growth-pulse/reference/gotchas.md
  • skills/growth-pulse/reference/output_template.md
  • skills/growth-pulse/reference/thresholds.md
  • skills/hiring-screener/SKILL.md
  • skills/hiring-screener/reference/candidate_comms.md
  • skills/hiring-screener/reference/fair_screening.md
  • skills/hiring-screener/reference/gotchas.md
  • skills/hiring-screener/reference/onboarding.md
  • skills/hiring-screener/reference/rubric.md
  • skills/inbox-manager/SKILL.md
  • skills/inbox-manager/reference/digest_format.md
  • skills/inbox-manager/reference/gotchas.md
  • skills/inbox-manager/reference/handoffs.md
  • skills/inbox-manager/reference/reply_drafting.md
  • skills/inbox-manager/reference/triage_rules.md
  • skills/inventory-planner/SKILL.md
  • skills/inventory-planner/reference/data_sources.md
  • skills/inventory-planner/reference/gotchas.md
  • skills/inventory-planner/reference/po_drafting.md
  • skills/inventory-planner/reference/seasonality.md
  • skills/inventory-planner/reference/velocity_and_reorder.md
  • skills/invoice-chase/SKILL.md
  • skills/invoice-chase/reference/examples/firm-reminder.md
  • skills/invoice-chase/reference/examples/gentle-reminder.md
  • skills/invoice-chase/reference/gotchas.md
  • skills/invoice-chase/reference/tone-matching.md
  • skills/invoice-chase/reference/v2_sources.md
  • skills/job-post-builder/SKILL.md
  • skills/job-post-builder/reference/docusign-routing.md
  • skills/job-post-builder/reference/examples/worked-example.md
  • skills/job-post-builder/reference/existing-document-merge.md
  • skills/job-post-builder/reference/gotchas.md
  • skills/job-post-builder/reference/interview-guide-structure.md
  • skills/job-post-builder/reference/job-post-structure.md
  • skills/job-post-builder/reference/offer-letter-template.md
  • skills/job-post-builder/reference/role-intake.md
  • skills/lead-finder/SKILL.md
  • skills/lead-finder/reference/gotchas.md
  • skills/lead-finder/reference/icp_method.md
  • skills/lead-finder/reference/output_template.md
  • skills/lead-finder/reference/scoring.md
  • skills/lead-finder/reference/sourcing.md
  • skills/lead-triage/SKILL.md
  • skills/lead-triage/reference/examples/happy-path-triage.md
  • skills/lead-triage/reference/gotchas.md
  • skills/lead-triage/reference/hubspot-scoring.md
  • skills/marketing-monday/SKILL.md
  • skills/monday-brief/SKILL.md
  • skills/month-end-prep/SKILL.md
  • skills/month-end-prep/reference/close-packet-format.md
  • skills/month-end-prep/reference/examples/pl-narrative.md
  • skills/month-end-prep/reference/gotchas.md
  • skills/month-end-prep/reference/paypal-settlements.md
  • skills/month-end-prep/reference/quickbooks-reconcile.md
  • skills/month-end-prep/reference/v2_sources.md
  • skills/month-end-prep/reference/xero-reconcile.md
  • skills/month-end-prep/reference/zoho-books-reconcile.md
  • skills/outreach-composer/SKILL.md
  • skills/outreach-composer/reference/gotchas.md
  • skills/outreach-composer/reference/output_template.md
  • skills/outreach-composer/reference/sequence_patterns.md
  • skills/outreach-composer/reference/slop_test.md
  • skills/pay-the-bills/SKILL.md
  • skills/payroll-prep/SKILL.md
  • skills/payroll-prep/reference/anomaly_rules.md
  • skills/payroll-prep/reference/books_sync.md
  • skills/payroll-prep/reference/gotchas.md
  • skills/payroll-prep/reference/run_sheet_format.md
  • skills/payroll-prep/reference/timesheet_intake.md
  • skills/plan-payroll/SKILL.md
  • skills/proposal-builder/SKILL.md
  • skills/proposal-builder/reference/discovery_extraction.md
  • skills/proposal-builder/reference/gotchas.md
  • skills/proposal-builder/reference/output_template.md
  • skills/proposal-builder/reference/pricing_method.md
  • skills/proposal-builder/reference/proposal_structure.md
  • skills/reactivate/SKILL.md
  • skills/report-builder/SKILL.md
  • skills/report-builder/reference/data_sources.md
  • skills/report-builder/reference/gotchas.md
  • skills/report-builder/reference/output_template.md
  • skills/report-builder/reference/report_spec.md
  • skills/report-builder/reference/saved_reports.md
  • skills/report-pack/SKILL.md
  • skills/restock/SKILL.md
  • skills/review-reputation/SKILL.md
  • skills/review-reputation/reference/churn-signals.md
  • skills/review-reputation/reference/examples/example-report.md
  • skills/review-reputation/reference/gotchas.md
  • skills/review-reputation/reference/response-patterns.md
  • skills/review-reputation/reference/sources.md
  • skills/seo-ai-visibility/SKILL.md
  • skills/seo-ai-visibility/reference/ai_visibility.md
  • skills/seo-ai-visibility/reference/audit_checklist.md
  • skills/seo-ai-visibility/reference/catalog_refresh.md
  • skills/seo-ai-visibility/reference/content_rewrite.md
  • skills/seo-ai-visibility/reference/gotchas.md
  • skills/smb-onboard/SKILL.md
  • skills/smb-onboard/reference/examples/happy-path.md
  • skills/smb-onboard/reference/gotchas.md
  • skills/smb-onboard/reference/onboard-checklist.md
  • skills/smb-onboard/reference/website-research.md
  • skills/smb-router/SKILL.md
  • skills/smb-router/reference/connector-map.md
  • skills/social-content-engine/SKILL.md
  • skills/social-content-engine/reference/calendar.md
  • skills/social-content-engine/reference/canva-api.md
  • skills/social-content-engine/reference/examples/okonkwo-campaign.md
  • skills/social-content-engine/reference/gotchas.md
  • skills/social-content-engine/reference/publishing.md
  • skills/social-content-engine/reference/shopify-assets.md
  • skills/speed-to-lead/SKILL.md
  • skills/speed-to-lead/reference/approval.md
  • skills/speed-to-lead/reference/gotchas.md
  • and 14 more

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More productivity skills and plugins

See all